5218 matches found
Ultimate PHP Board chat/login.php username Parameter Arbitrary Command Execution
The remote host is running Ultimate PHP Board UPB. The version of UPB installed on the remote host does not sanitize input to the 'username' parameter of the 'chat/login.php' script before writing it to 'chat/text.php'. Regardless of PHP's settings, an attacker can leverage this flaw to inject...
CVE-2006-6790
Direct static code injection vulnerability in chat/login.php in Ultimate PHP Board UPB 2.0b1 and earlier allows remote attackers to inject arbitrary PHP code via the username parameter, which is injected into chat/text.php...
CVE-2006-6790: Undefined Security Weakness
Direct static code injection vulnerability in chat/login.php in Ultimate PHP Board UPB 2.0b1 and earlier allows remote attackers to inject arbitrary PHP code via the username parameter, which is injected into chat/text.php...
CVE-2006-6790
Summary: CVE-2006-6790 affects Ultimate PHP Board (UPB) 2.0b1 and earlier. The vulnerability is in chat/login.php where the username parameter is written to chat/text.php without proper sanitization, allowing an attacker to inject arbitrary PHP code that can be executed with the web server user p...
Again break ray client figure ASP webmaster Safety assistant-vulnerability warning-the black bar safety net
Original connection: www.hacker.com.cn hacker Defense 2 0 0 6 in 1 0 period Looks like the book is not yet out,the article would appear online,today suddenly see,just go look The author of the article is: TTFCT Again break ray client figure ASP webmaster Safety assistant www.hacker.com.cn hacker...
Ultimate PHP Board <= 2.0b1 (chat/login.php) Code Execution Exploit
No description provided by source. !/usr/bin/perl +------------------------------------------------------------------------------------------- + Ultimate PHP Board = 2.0b1 chat/login.php Remote Code Execution Vulnerability...
Ultimate PHP Board <= 2.0b1 (chat/login.php) Code Execution Exploit
Exploit for unknown platform in category web applications =================================================================== Ultimate PHP Board 23: $filename = "text.php"; + - 24: $fileAr= file$filename; + - 25: exec"cat /dev/null '$filename'"; + - 26: $fd...
Ultimate PHP Board 2.0b1 - chatlogin.php Code Execution
Ultimate PHP Board 2.0b1 - chatlogin.php Code Execution !/usr/bin/perl +------------------------------------------------------------------------------------------- + Ultimate PHP Board +------------------------------------------------------------------------------------------- + Details: + Ultima...
Ultimate PHP Board 2.0b1 - '/chat/login.php' Code Execution
!/usr/bin/perl +------------------------------------------------------------------------------------------- + Ultimate PHP Board +------------------------------------------------------------------------------------------- + Details: + Ultimate PHP Board chat/login.php does not sanatize the...
CVE-2006-6380
Cross-site scripting XSS vulnerability in index.asp in Ultimate HelpDesk allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...
CVE-2006-6381
Directory traversal vulnerability in getfile.asp in Ultimate HelpDesk allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...
CVE-2006-6380
Cross-site scripting XSS vulnerability in index.asp in Ultimate HelpDesk allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...
CVE-2006-6380
CVE-2006-6380 concerns a Cross-site Scripting (XSS) vulnerability in Ultimate HelpDesk’s index.asp, exploitable via the keyword parameter. The issue allows remote attackers to inject arbitrary web script or HTML into the page, with the potential to affect users’ sessions and data depending on the...
CVE-2006-6381
The CVE-2006-6381 entry describes a directory traversal vulnerability in Ultimate HelpDesk, specifically in getfile.asp, where remote attackers can read arbitrary files by supplying a .. (dot dot) in the filename parameter. The affected software/component is Ultimate HelpDesk (getfile.asp). Root ...
CVE-2006-6381
Directory traversal vulnerability in getfile.asp in Ultimate HelpDesk allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...
CVE-2006-6380: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.asp in Ultimate HelpDesk allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...
CVE-2006-6381: Undefined Security Weakness
Directory traversal vulnerability in getfile.asp in Ultimate HelpDesk allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...
timate HelpDesk (XSS/Local File Disclosure) Vulnerabilities
No description provided by source. Title : Ultimate HelpDesk All Version Source/XSS Vulnerabilities Author : ajann Contact : : Login Before Vulnerabilities.: SOURCE------------------------------------------------------ http://target/path//getfile.asp?filename=SQL Example:...